Rakesh Kalidindi       

Security Loophole

MISM 670

Periodical Review

 

                                                Security Loophole Found In Windows Operating System

 

The article is about a new vulnerability in Windows Operating System. A group of researchers found a security venerability in Microsoft windows 2000 Operating System. The researchers say that once the loophole is exploited can access the information like credit card numbers, emails and passwords on other computers. They used random generator method to find the vulnerability.

 

Security breaching is one of the best methods to find the vulnerabilities. It is a hacking method done by security managers belonging to a company to find the vulnerabilities easily. Previous security breaches have enabled hackers to follow correspondence from a computer from the time of the breach onwards. But the newly found loophole enables the hackers to access information that was sent prior to the security breach and even the information that is no longer stored on the computer. The researchers found this loophole using a method called random number generator which is a critical building block for mail and encryption. The researchers say that advance planning is required for hacking a computer using the methods like random number generator. They conclude that Microsoft should improve their way of encoding the information. They recommend that Microsoft should publish the code of their random number generators as well as of other elements of the "Windows" security system to enable computer security experts outside Microsoft to evaluate their effectiveness. Vulnerabilities are common in any system, one should regularly test the system to remove them before they exploit.

 

My Opinion on this article is the researchers had done a fabulous job in finding the loophole using random number generator method. All the companies like Microsoft should appoint a group of members and use different methods to regularly test if there are any vulnerabilities in their products and eliminate them if found.

 

Source Citation: University of Haifa (2007, November 12). Security Loophole Found In Windows Operating System. Science Daily. Retrieved October 14, 2008, from http://www.sciencedaily.com­ /releases/2007/11/071112091850.htm